Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/AtYSlmcRKkTGh1em1Qnjj9lkmBk.roa
File: AtYSlmcRKkTGh1em1Qnjj9lkmBk.roa (raw, json)
Hash identifier: Eoc/PvNGd+QsEBhdeRtyf8AfALmYQ9mnXOMMgxuRoAE=
Subject key identifier: 02:D6:12:96:67:11:2A:44:C6:87:57:A6:D5:09:E3:8F:D9:64:98:19
Certificate issuer: /CN=9fc76d127ab067959964a2455f4ad4e7542d3bfe
Certificate serial: 01A1542207D555A653FB09B9679EAE9F904F
Authority key identifier: 9F:C7:6D:12:7A:B0:67:95:99:64:A2:45:5F:4A:D4:E7:54:2D:3B:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8dtEnqwZ5WZZKJFX0rU51QtO_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/AtYSlmcRKkTGh1em1Qnjj9lkmBk.roa
Signing time: Mon 19 Oct 2026 12:27:58 +0000
ROA not before: Mon 19 Oct 2026 12:27:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218384
IP address blocks: 2a0f:44c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/n8dtEnqwZ5WZZKJFX0rU51QtO_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/n8dtEnqwZ5WZZKJFX0rU51QtO_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8dtEnqwZ5WZZKJFX0rU51QtO_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:22:07:d5:55:a6:53:fb:09:b9:67:9e:ae:9f:90:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc76d127ab067959964a2455f4ad4e7542d3bfe
Validity
Not Before: Oct 19 12:27:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02d6129667112a44c68757a6d509e38fd9649819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:4a:0c:ff:73:10:90:b6:21:a8:9e:ee:77:
f3:ef:04:e9:45:d5:75:e1:7d:36:29:f5:9a:d3:b0:
c7:7a:f6:bf:41:b9:3e:90:73:07:22:3c:a1:49:1a:
d2:0b:ec:fd:bf:56:68:87:41:3e:81:44:de:a5:a3:
4b:c2:1a:52:64:ab:e8:b7:4a:3a:22:6a:c9:9e:e4:
0e:99:f4:cc:88:00:d3:c0:3b:7a:4b:9c:56:a1:26:
c8:fa:72:7d:a7:e5:df:c8:bc:12:f9:16:8a:cc:dc:
8b:c1:6f:7c:56:bc:dd:80:8c:f4:b1:10:b9:84:27:
1a:30:be:e8:c9:c1:95:57:f3:57:3a:79:9c:e4:41:
8f:b0:7f:56:d2:a3:cc:30:b6:2b:14:2c:c1:4c:77:
37:22:4e:f3:d7:39:fa:59:f1:4c:78:80:51:ed:f7:
9f:3e:73:90:3c:a2:b1:75:26:8e:45:6a:50:34:50:
e7:21:00:98:fb:0c:04:ef:c4:d7:e8:d5:17:4d:f5:
80:84:34:3e:9b:2e:d0:2d:b4:a4:4d:10:90:5f:a1:
96:fe:cb:b2:38:40:89:b3:c9:6b:01:d4:12:48:79:
c0:1a:f0:ae:9d:ab:87:ce:63:95:6a:64:a2:6f:0e:
13:8f:fb:29:68:a4:75:9d:ed:d9:ba:3f:a4:10:3a:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D6:12:96:67:11:2A:44:C6:87:57:A6:D5:09:E3:8F:D9:64:98:19
X509v3 Authority Key Identifier:
keyid:9F:C7:6D:12:7A:B0:67:95:99:64:A2:45:5F:4A:D4:E7:54:2D:3B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8dtEnqwZ5WZZKJFX0rU51QtO_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/AtYSlmcRKkTGh1em1Qnjj9lkmBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/n8dtEnqwZ5WZZKJFX0rU51QtO_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:44c0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:53:f6:47:a6:a5:46:7b:5b:1a:41:d1:8f:1a:a6:a1:79:6a:
52:9c:4b:1b:7b:b8:d7:88:93:1c:16:c4:30:81:65:c8:0c:81:
00:6c:dd:56:d8:22:42:d7:a6:5b:ff:c1:c6:0f:8b:ef:35:1a:
cf:e7:68:5d:c9:3e:5e:fe:2d:78:0e:b4:a1:07:43:73:f7:05:
4c:ca:b5:30:39:62:ef:a5:5f:b0:6c:9c:67:9c:29:41:18:c6:
f1:05:a2:51:6d:38:81:7a:b8:3e:b1:54:db:b4:ed:9a:59:c5:
54:85:a5:9b:ec:2e:28:2e:37:0b:9a:20:9f:39:0d:00:bb:fb:
ea:7a:a0:cc:75:57:0d:ff:9b:b8:d9:02:4e:ae:16:1f:16:c4:
34:77:54:26:f6:7f:c8:61:5c:73:22:e0:a1:73:f1:88:74:a6:
2b:34:6a:cb:67:6b:11:f4:c7:80:4a:fb:43:40:1c:9b:11:1e:
be:88:ba:fe:a2:dc:d2:78:e5:33:9a:97:38:eb:60:ed:91:df:
05:c6:32:88:83:ab:14:ce:89:ed:ed:2b:dd:fd:86:c8:17:fa:
c0:e3:20:f4:99:20:97:db:ed:7f:31:2c:ea:22:e9:05:d3:b6:
c2:be:56:08:12:99:26:07:b2:db:05:86:cd:1c:5b:bd:c0:ef:
7e:cd:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:43 2026 by rpki-client